Privacy Policy

1. Introduction

We attach great importance to protecting your privacy. This policy explains what personal data NORDE SRL collects, why, on what legal basis, how long it is kept and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018.

2. Data controller

The data controller is NORDE SRL, whose registered office is at Rue des Vignes 35, 1435 Mont-Saint-Guibert, Belgium (VAT BE1039457839). For any question about your data or to exercise your rights, write to us at kriss@norde.be. We have not appointed a Data Protection Officer (DPO), as this is not mandatory given our activities.

3. Data we collect

• Contact form: name, email address, phone number and information about your project.
• Online booking: name and email, via our scheduling tool (Cal.com).
• Browsing: audience and usage measurement data placed only after your consent (see our Cookie Policy).

4. Purposes and legal bases

• Responding to your requests and preparing a quote : pre-contractual measures and performance of the contract (Art. 6.1.b GDPR).
• Customer relationship management, invoicing : performance of the contract and compliance with our legal, in particular accounting, obligations (Art. 6.1.b and 6.1.c).
• Audience measurement, usage analysis and advertising (Google Analytics, Microsoft Clarity, advertising cookies): your consent (Art. 6.1.a), which can be withdrawn at any time.
• Security and proper functioning of the site : our legitimate interest (Art. 6.1.f).

5. Retention periods

• Prospects (request without follow-up): 3 years from the last contact.
• Clients (contracts, invoices, accounting records): 10 years, in accordance with Belgian accounting law.
• Browsing data / cookies: according to the lifetime of each cookie (see the Cookie Policy), and at most 13 months for consent.

6. Recipients and processors

We do not sell or rent your data. It may be shared with processors acting on our behalf and under contract:

• Hostinger (website hosting, servers in the European Union);
• Google (Google Analytics and, where applicable, advertising);
• Microsoft (Clarity, usage analysis);
• Cal.com (online appointment booking);
• our email provider (delivery of contact-form emails).

7. Transfers outside the European Union

Some processors (in particular Google and Microsoft) may process data in the United States. These transfers are governed by appropriate safeguards under the GDPR: certification under the EU-US Data Privacy Frameworkand/or the European Commission's standard contractual clauses.

8. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw your consent at any time (without affecting the lawfulness of processing carried out before the withdrawal). To exercise them, write to us at kriss@norde.be.

9. Complaint to the supervisory authority

If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données (APD)): Rue de la Presse 35, 1000 Bruxelles - +32 (0)2 274 48 00 - contact@apd-gba.be - https://www.autoriteprotectiondonnees.be.

10. Automated decision-making

We do not carry out any solely automated decision-making or profiling producing legal effects concerning you.

11. Security and changes

We implement appropriate technical and organisational measures to protect your data (secure hosting, backups, restricted access). This policy may be updated; the date of the latest update appears at the top of the page.